「付款應用程式資料安全標準 (PA-DSS)」的需求是衍生自 Payment Card Industry Data Security Standard (PCI DSS) 需求和「安全評量程序」。傳統的「PCI 資料安標準」依循性可能無法直接適用於付款應用程式供應商,因為大部分的供應商並不會儲存、處理或傳遞持卡人資料。然而,由於客戶使用這些付款應用程式來儲存、處理和傳遞持卡人資料,而客戶必須依循「PCI 資料安全標準」,因此,付款應用程式應該促進(而非防止)客戶來依循「PCI 資料安全標準」。
The Payment Application Data Security Standard (PA-DSS), formerly referred to as the Payment Application Best Practices (PABP), is the global security standard created by the Payment Card Industry Security Standards Council (PCI SSC).[1]
PA-DSS was implemented in an effort to provide the definitive data standard for software vendors that develop payment applications. The standard aims to prevent developed payment applications for third parties from storing prohibited secure data including magnetic stripe, CVV2, or PIN. In that process, the standard also dictates that software vendors develop payment applications that are compliant with the Payment Card Industry Data Security Standards (PCI DSS).